4 ms·

Looking into the page inspector shows 165 http requests on the start page. It includes ads, tracker and analystics from multiple sources (google, twitter, linke

Looking into the page inspector shows 165 http requests on the start page. It includes ads, tracker and analystics from multiple sources (google, twitter, linkedin, facebook etc). Can anyone sugguest an (offline?) alternative? I used jwt.io a lot for debugging and it's great. Currently it is decoding the tokens on the client but I am not sure if I should continue using it. A hacker could take over the site and capture thousands of access tokens and some are valid for multiple days. Edit: Installing uBlock origin reduces the number of requests down to 67 but I still see the analytics stuff from google and twitter.

ucarion 6y ago
You can pretty easily parse + verify JWTs in Bash using cut + base64 + openssl, although the precise invocations depend on which "alg"s you're using.
capableweb 6y ago
The website source is here: https://github.com/jsonwebtoken/jsonwebtoken.github.io https://github.com/jsonwebtoken/jsonwebtoken.github.io I've been running a local copy since last year sometime, when the website went down when I needed it. I've also stripped away all the annoying things from the website to just get the debugger. Very easy to do!
- teajunky 6y ago
  Thanks. I once searched for it but only found some used libraries.
  - capableweb 6y ago
    Yeah, Auth0 is doing a good job hiding it, seems they are not super hyped about the website being open source.
    - guptaneil 6y ago
      What makes you think that? There's a link in jwt.io's footer to the GitHub repo.
vegemike 6y ago
If you want something locally and use the command line, I’ve created and maintain a jwt cli tool to encode and decode jwts. https://github.com/mike-engel/jwt-cli https://github.com/mike-engel/jwt-cli
mark_h 6y ago
I always end up using https://jwt.ms/ https://jwt.ms/ because it's much more lightweight.
52-6F-62 6y ago
Side note: the DuckDuckGo Firefox extension kills a lot of those analytics and tracker requests. Contrary to some of the reviews, turning it off is as easy as flipping a switch. https://addons.mozilla.org/en-US/firefox/addon/duckduckgo-for-firefox/ https://addons.mozilla.org/en-US/firefox/addon/duckduckgo-fo...
dirkt 6y ago
If you are not afraid of the command line, have a look at smallstep [1]. I use it all the time for JWT debugging, and it can do other things as well. [1] https://github.com/smallstep/cli https://github.com/smallstep/cli
abhishektwr 6y ago
JWT Debugger App is a good alternative. It’s cross-platform so you can install on you local desktop or just use web version whatever works for you. https://jwtdebugger.app/ https://jwtdebugger.app/

ucarion 6y ago

You can pretty easily parse + verify JWTs in Bash using cut + base64 + openssl, although the precise invocations depend on which "alg"s you're using.

capableweb 6y ago

The website source is here: https://github.com/jsonwebtoken/jsonwebtoken.github.io https://github.com/jsonwebtoken/jsonwebtoken.github.io I've been running a local copy since last year sometime, when the website went down when I needed it. I've also stripped away all the annoying things from the website to just get the debugger. Very easy to do!

teajunky 6y ago
Thanks. I once searched for it but only found some used libraries.
- capableweb 6y ago
  Yeah, Auth0 is doing a good job hiding it, seems they are not super hyped about the website being open source.
  - guptaneil 6y ago
    What makes you think that? There's a link in jwt.io's footer to the GitHub repo.

vegemike 6y ago

If you want something locally and use the command line, I’ve created and maintain a jwt cli tool to encode and decode jwts. https://github.com/mike-engel/jwt-cli https://github.com/mike-engel/jwt-cli

mark_h 6y ago

I always end up using https://jwt.ms/ https://jwt.ms/ because it's much more lightweight.

52-6F-62 6y ago

Side note: the DuckDuckGo Firefox extension kills a lot of those analytics and tracker requests. Contrary to some of the reviews, turning it off is as easy as flipping a switch. https://addons.mozilla.org/en-US/firefox/addon/duckduckgo-for-firefox/ https://addons.mozilla.org/en-US/firefox/addon/duckduckgo-fo...

dirkt 6y ago

If you are not afraid of the command line, have a look at smallstep [1]. I use it all the time for JWT debugging, and it can do other things as well. [1] https://github.com/smallstep/cli https://github.com/smallstep/cli

abhishektwr 6y ago

JWT Debugger App is a good alternative. It’s cross-platform so you can install on you local desktop or just use web version whatever works for you. https://jwtdebugger.app/ https://jwtdebugger.app/